PT-2017-9786

CVE-2016-8756

Published

2017-04-02

Updated

2017-04-07

Description by

CVSS 2.0

7.1

High

MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-DL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-TL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-CL10C00B197 and earlier versions

Description The issue affects the ION memory management module, allowing attackers to cause a denial of service, which results in the device restarting.

Recommendations For Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, update to a version later than NXT-AL10C00B197. For Huawei Mate 8 phones with software NXT-DL10C00B197 and earlier versions, update to a version later than NXT-DL10C00B197. For Huawei Mate 8 phones with software NXT-TL10C00B197 and earlier versions, update to a version later than NXT-TL10C00B197. For Huawei Mate 8 phones with software NXT-CL10C00B197 and earlier versions, update to a version later than NXT-CL10C00B197.

Exploitability

Fix

Impacts

Researchers

Dongdong She

Hang Zhang

Zhiyun Qian

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers